ClawHub
Back to skill

Security audit

GRC Maturity

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward GRC assessment API wrapper, but users should treat submitted assessment data and identifiers as information sent to an external service.

Install only if you are comfortable sending GRC maturity scores, session identifiers, timestamps, and optionally user IDs to the listed external service. Avoid submitting confidential control weaknesses or regulated data unless your organization has approved that provider and understands retention and processing terms.

A.I.G

Vulnerability Patterns
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T09 · Insecure Skill Coding Practices

Warning
Location
openapi.json:102
Finding

Unrestricted GRC Assessment Dimensions and Score Values

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill documents sending assessmentData, sessionId, userId, and timestamp to an external assessment service but does not warn users that potentially sensitive organizational compliance data and identifiers leave the local environment. This creates a real privacy and data-governance risk because operators may submit internal maturity gaps, governance weaknesses, or user-linked records without informed consent or review.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
85% confidence
Finding

The skill references and depends on an external API endpoint, which means user-supplied organizational assessment content is transmitted outside the trust boundary. In this context the external transmission is expected functionality, but it is still security-relevant because the data includes sensitive GRC posture information that could expose control weaknesses, compliance gaps, and internal identifiers if mishandled by the third party.

Content

Scanner excerpt · SKILL.md (reported line 166)May include surrounding context.

md
## References

- Kong Route: https://api.mkkpro.com/compliance/grc-maturity
- API Docs: https://api.mkkpro.com:8163/docs

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

For manifest/markdown-style descriptions of skill behavior, warnings should be present when the skill handles user data that may affect privacy. The schema collects 'sessionId', optional 'userId', and 'timestamp', but the OpenAPI description provides no disclosure about collecting, transmitting, or retaining these identifiers during assessment generation.

Content

No source excerpt is available for this finding.

Vague Triggers

Low
Category
Not specified by scanner
Confidence
87% confidence
Finding

This is a manifest-style OpenAPI file, so vague-trigger checks apply. The description 'Generate GRC maturity assessment report' describes capability broadly but does not define when this skill should be invoked, any trigger phrases, or limiting conditions, which could allow overly broad matching in systems that infer activation from API metadata.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.